New endpoint to destroy user sessions
Extract verification of authentication to BaseController
Expose authorized spec tag to ensure an endpoint is checking for auth